gsadmin/AutopilotMonitor
1
0
Fork 0
mirror of https://github.com/okieselbach/AutopilotMonitor.git synced 2026-10-24 04:32:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(bootstrap): verify runtime process started after schtasks /Run

Browse Source 
schtasks reports SUCCESS as soon as the run is queued, not once the
process is actually alive. A silent block (AV/EDR, AppLocker/WDAC) or
Task Scheduler defer during OOBE would otherwise stay invisible until
the next reboot triggers the task via /SC ONSTART.

After --install, poll Get-Process for AutopilotMonitor.Agent.V2 every
500ms up to 10s. Log pid + StartTime on success, or a clear WARNING
that points operators at TaskScheduler/Operational + AV/EDR logs on
failure. Same change applied to the production and dev variants.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Oliver Kieselbach
2026-04-30 18:05:51 +02:00
parent ba0fb7ae0c
commit 86ae616b3b
2 changed files with 46 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/Bootstrap/Install-AutopilotMonitor-v2-dev.ps1
+23
View File
@@ -260,6 +260,29 @@ try {
throw "Agent install failed with exit code $installExitCode"
}
Write-Log "Agent install mode completed successfully"
# Verify the runtime process actually started after schtasks /Run.
# schtasks reports SUCCESS as soon as the run is queued, not once the process
# is alive. Silent launch failures (AV/EDR block, AppLocker/WDAC, scheduler
# defer during OOBE) would otherwise stay invisible until the next reboot
# triggers the task via /SC ONSTART.
$runtimeProcessName = 'AutopilotMonitor.Agent.V2'
$verifyTimeoutSec = 10
$verifyDeadline = (Get-Date).AddSeconds($verifyTimeoutSec)
$runtimeProc = $null
while ((Get-Date) -lt $verifyDeadline) {
$runtimeProc = Get-Process -Name $runtimeProcessName -ErrorAction SilentlyContinue | Select-Object -First 1
if ($null -ne $runtimeProc) { break }
Start-Sleep -Milliseconds 500
}
if ($null -ne $runtimeProc) {
$startedUtc = 'unavailable'
try { $startedUtc = $runtimeProc.StartTime.ToUniversalTime().ToString('o') } catch { }
Write-Log ("Runtime process verified: name={0}.exe pid={1} startedUtc={2}" -f $runtimeProcessName, $runtimeProc.Id, $startedUtc)
} else {
Write-Log ("WARNING: Runtime process verification FAILED. schtasks /Run was reported SUCCESS by --install, but no '{0}.exe' process appeared within {1}s. Likely silent block (AV/EDR, AppLocker/WDAC) or Task Scheduler defer. Agent may not start until next system boot ('/SC ONSTART'). Check Event Viewer > Microsoft > Windows > TaskScheduler/Operational and AV/EDR logs for '{0}.exe'." -f $runtimeProcessName, $verifyTimeoutSec)
}
Write-Log "===== Bootstrap Completed Successfully (DEV) ====="
exit 0
scripts/Bootstrap/Install-AutopilotMonitor-v2.ps1
+23
View File
@@ -303,6 +303,29 @@ try {
throw "Agent install failed with exit code $installExitCode"
}
Write-Log "Agent install mode completed successfully"
# Verify the runtime process actually started after schtasks /Run.
# schtasks reports SUCCESS as soon as the run is queued, not once the process
# is alive. Silent launch failures (AV/EDR block, AppLocker/WDAC, scheduler
# defer during OOBE) would otherwise stay invisible until the next reboot
# triggers the task via /SC ONSTART.
$runtimeProcessName = 'AutopilotMonitor.Agent.V2'
$verifyTimeoutSec = 10
$verifyDeadline = (Get-Date).AddSeconds($verifyTimeoutSec)
$runtimeProc = $null
while ((Get-Date) -lt $verifyDeadline) {
$runtimeProc = Get-Process -Name $runtimeProcessName -ErrorAction SilentlyContinue | Select-Object -First 1
if ($null -ne $runtimeProc) { break }
Start-Sleep -Milliseconds 500
}
if ($null -ne $runtimeProc) {
$startedUtc = 'unavailable'
try { $startedUtc = $runtimeProc.StartTime.ToUniversalTime().ToString('o') } catch { }
Write-Log ("Runtime process verified: name={0}.exe pid={1} startedUtc={2}" -f $runtimeProcessName, $runtimeProc.Id, $startedUtc)
} else {
Write-Log ("WARNING: Runtime process verification FAILED. schtasks /Run was reported SUCCESS by --install, but no '{0}.exe' process appeared within {1}s. Likely silent block (AV/EDR, AppLocker/WDAC) or Task Scheduler defer. Agent may not start until next system boot ('/SC ONSTART'). Check Event Viewer > Microsoft > Windows > TaskScheduler/Operational and AV/EDR logs for '{0}.exe'." -f $runtimeProcessName, $verifyTimeoutSec)
}
Write-Log "===== Bootstrap Completed Successfully ====="
exit 0